Skip to content

Commit cd1acb9

Browse files
authored
Change expiration dates for CVE-2026-33870 and CVE-2026-33871 (#1351)
*Description of changes:* Updated expiration dates for CVE vulnerabilities in trivyignore. By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
1 parent 4defbd8 commit cd1acb9

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

.github/trivy/pr-build.trivyignore.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
vulnerabilities:
1212
- id: CVE-2026-33870
1313
statement: "Netty HTTP/1.1 Request Smuggling. Fix: bump netty-bom to 4.1.132.Final. https://github.com/aws-observability/aws-otel-java-instrumentation/issues/1346"
14-
expired_at: 2026-04-14
14+
expired_at: 2026-04-21
1515
- id: CVE-2026-33871
1616
statement: "Netty HTTP/2 CONTINUATION frame flood DoS. Fix: bump netty-bom to 4.1.132.Final. https://github.com/aws-observability/aws-otel-java-instrumentation/issues/1346"
17-
expired_at: 2026-04-14
17+
expired_at: 2026-04-21

0 commit comments

Comments
 (0)